CtrlK
BlogDocsLog inGet started
Tessl Logo

hipaa-compliance

HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.

69

Quality

84%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

SecuritybySnyk

Passed

No findings from the security scan

The canonical home for this skill is tdg-personal/hipaa-compliance

SKILL.md
Quality
Evals
Security

Quality

Content

78%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

A lean, well-structured routing/overlay skill that assumes Claude's domain knowledge and provides concrete decision gates, guardrails, and worked examples without padding. It scores slightly below ceiling on conciseness, actionability, and workflow clarity due to minor redundancy across sections and delegation of implementation rules to sibling skills, while progressive disclosure is clean and self-contained.

Suggestions

Tighten conciseness by trimming overlap between the How It Works decision gates and the HIPAA-Specific Guardrails, and condensing Example 2 which restates the guardrails already listed above.

Lift actionability by inlining 1-2 of the most critical concrete rules (e.g., a minimal PHI-safe logging pattern or a BAA-gating checklist) rather than only pointing to healthcare-phi-compliance for all implementation detail.

Add an explicit verify/escalate checkpoint in How It Works (e.g., 'Confirm no PHI in the data path before proceeding; if uncertain, escalate to healthcare-reviewer') to push workflow clarity toward the score-5 anchor.

DimensionReasoningScore

Conciseness

Quotes terse imperative guardrails ("Never place PHI in logs, analytics events, crash reports, prompts, or client-visible error strings") with no padding or explanations of HIPAA/PHI/BAA concepts, matching the score-4 'efficient; minor instances that could be trimmed' band; not 5 because the two worked Examples and the How-It-Works/Guardrails sections restate some overlapping guidance, and not 3 because there is no unnecessary concept explanation.

4 / 5

Actionability

Concrete decision-gate questions ("Is this data PHI?", "Does a vendor or model provider require a BAA before touching the data?", "Are read/write/export events auditable?") and specific prohibitions give mostly executable guidance; per the instruction-only scoring note absence of code is not penalized, but it stops at 4 rather than 5 because the actual implementation rules are delegated to sibling skills rather than contained here.

4 / 5

Workflow Clarity

Quotes a clear 3-step sequence ("Start with healthcare-phi-compliance", "Apply HIPAA-specific decision gates", "Escalate to healthcare-reviewer") with a numbered decision-gate checklist and an explicit escalation condition, matching score-4; not 5 because there is no explicit validate-then-fix feedback loop, and not 3 because the sequence and checkpoints are explicit rather than gappy. The destructive/batch cap-at-3 rule does not apply to this routing/decision skill.

4 / 5

Progressive Disclosure

Well-organized with clear section headers (When to Use, How It Works, HIPAA-Specific Guardrails, Examples, Related Skills) and a one-level-deep Related-Skills pointer, with no nested references; as a self-contained sub-~70-line skill with no bundle files needed it matches the score-5 well-organized anchor rather than 4.

5 / 5

Total

17

/

20

Passed

Description

90%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, well-scoped description that explicitly pairs a clear 'what' with a concrete 'Use when' trigger clause rich in natural healthcare-compliance terms. The only soft spot is specificity, which states the skill's role rather than enumerating multiple concrete actions.

DimensionReasoningScore

Specificity

Quotes "HIPAA-specific entrypoint for healthcare privacy and security work" — names the domain and a concrete role (entrypoint/overlay) but describes function rather than listing multiple concrete actions like the score-4/5 anchors, so it sits at the score-3 'names domain and 1-2 concrete actions' band rather than 2 (purely generic) or 4 (several specific actions).

3 / 5

Completeness

Explicitly answers both what ("HIPAA-specific entrypoint for healthcare privacy and security work") and when ("Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements") with concrete trigger phrases, exactly matching the score-5 anchor; not 4 because the 'when' clause is fully explicit rather than merely adequate.

5 / 5

Trigger Term Quality

Quotes "HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements" — comprehensive natural terms with synonyms (HIPAA/PHI/BAA) that a healthcare-compliance user would actually say, matching the score-5 anchor; not 4 because coverage is thorough rather than missing common variations.

5 / 5

Distinctiveness Conflict Risk

Clear niche scoped to US healthcare compliance with distinct triggers (HIPAA, PHI, covered entities, BAAs) and minimal overlap risk, matching the score-5 'clear niche with distinct triggers' anchor; not 4 because the scope is sharply bounded rather than having minor overlap with related skills.

5 / 5

Total

18

/

20

Passed

Validation

100%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation16 / 16 Passed

Validation for skill structure

No warnings or errors.

Repository
affaan-m/ECC
Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.